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Abstract 

We propose a novel algorithm for selection of dangerous 
N-2 contingencies associated with line or generator failures. 
The algorithm is based on iterative filtering of the set of all 
possible double contingencies. It is certified to identify all the 
dangerous contingencies, and has the complexity comparable 
to the N-1 contingency screening. Tests performed on realistic 
model of Polish power grid with about 3000 buses show that 
only two iterations of algorithm allow one to certify the safety 
of 99.9% of all double contingencies, leaving only 0.1% of 
the most dangerous ones for direct analysis. 

1. Introduction 



North American Electric Reliability Corporation requires 
system operators to maintain security of the power grid and 
satisfy the N — \ contingency criterion. The consequences 
of single component failure contingency should be limited 
to a single circuit fl]. However, even if the power grid is 
protected against single element contingency, they are still 
vulnerable to the events which involve multiple component 
outage or failures: N — k contingencies. This problem will 
likely become even more important in coming years as the 
demand growth outpaces the introduction of new generation 
and transmission capacity, the non-dispatchable generation 
becomes more popular and energy markets are getting less 
regulated. The problem of contingency screening for fc > 1 
is computationally hard, and is practically intractable even 
for modest values of N and k. 

Multiple approaches have been proposed to address the 
problem of N ~ k contingency screening problem complexity. 
The classical approaches involve ranking and selection meth- 
ods |[2}|7j that rank outage configurations due to heuristic 
index, new branch of such approaches investigate contingen- 
cies basing on linear outage distribution factors |8 9|. There 
are number of approaches based on network topology analysis 
1 10 121, nonlinear optimization 1 13 -15] and others. Despite 
the fact that almost all researches were made conceming line 
contingencies, lines tripping is not the only mechanism of 
outages there are many of them, such as voltage collapse, 
relay failures, operator failure and generators tripping (on 
which we are focused in this work), to name of few | [T6) . It is 
quite common to simulate contingencies with DC power flow 



simplifications, however there are also investigations based 
on AC power flow models p7| |T8J , in this work we stay 
in DC model to avoid difficulty associated with modeling 
voltage collapse in steady-state. 

Recently, we have proposed and alternative approach | |T9| 
that unlike the most of the common heuristic techniques is 
mathematically certified to identify all the dangerous N — 2 
contingencies, while maintaining the number of operations at 
very low level, comparable to the total number of dangerous 
N — 2 contingencies. For a model system of Polish power 
grid with about N ^ 3000 buses the approach decreased the 
total number of pairs that need to be analyzed by a factor 
of 2000 at the expense of an additional overhead of 0{N'^) 
operations, comparable to the complexity of the classical 
iV — 1 contingency screening. In our first presentation of 
this approach fI91 we have considered only contingencies 
associated with individual power line tripping events and 
ignored the islanding scenarios. In this proceedings we extend 
the approach to incorporate the generator failure events, and 
provide more detailed discussion of the contingency selection 
and certification ideas. 

2. Fast solution of contingency selection 

PROBLEM 

The contingency selection problem in its general form can 
be formulated as follows. Given a large power system with 
multiple elements we can identify the set of one-element 
contingencies Ci corresponding to configurations where one 
element has failed. The set of 2-element contingencies can be 
formed as a Cartesian product of C2 — Ci k Ci representing 
the pairs of failed elements. Similarly the construction can be 
extended to k contingencies. Every real power system is also 
characterized by a set of constraints F, typically associated 
with power flows or voltage levels on individual elements. 

The goal of the contingency selection problem is to identify 
the subset of dangerous fc-element contingencies that violate at 
least one of the constraints. The complexity of the brute force 
approach that enumerates all the contingencies is given by 
0{N''P) + 0{N^M) where N is the number of one-element 
contingencies, P is the number of operation required to solve 
load flow problem, and M is the number of constraints, i.e. 
the size of the set Clearly, this approach is not feasible 
for real life power grids. 



The natural question is whether it is possible to reduce 
the number of operations required to select the contingencies. 
Although this is not possible for arbitrary systems, one can 
expect more efficient algorithms to exists in actual power 
systems. In power systems the structure of the network is 
such that failures of most components produce a significant 
effect only in small number of constrained components. 
Intelligent exploitation of this property may be used for 
dramatic reduction of the number of contingencies that need 
to be analyzed. This idea has been explored in the number of 
recent papers |20 2T|, where the notion of dual graph was 
introduced to represent the influence of lines on each other. 

The key idea of our approach builds upon the concept of 
response function A" that represents the effect of contingency 
a e C on the power flow solutions through constrained 
element x E The concept of response function is closely 
related to the line outage distribution factor extensively studied 
in the power systems literature, and generalizes it for more 
general class of contingencies and constraints. For instance 
response functions can be used to represent the effect of 
generator failure on the voltage level on other generator buses, 
or on the phase difference on a power line. 

Our algorithm is based on two key ideas. First, we argue 
that it is possible to relate the response functions A^"'*^' of 
double contingencies to the response functions of individual 
elements A", and A^. Second, using this relation one can 
efficiently bound the overall response for the majority of 
double contingencies, and certify their "safety" without 
analyzing each one of them explicitly. Combination of these 
two ideas leads to an effective algorithm that reduces the 
overall computation time by several orders of magnitude, but 
is guaranteed to find all the dangerous double contingencies. 
While the details of the algorithms are explained in Section |3] 
and our recent publication |19|, below we provide qualitative 
explanation of the key techniques used in response function 
analysis and contingency filtering. 
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Fig. 1. Influence of the pair of contingency elements (a, 0) on tlie constraint 
element x througli single tripping influences 

The effect of double contingency {a,j3) on the constrained 
element x represented by the response function A^"'^^ can 
be formally decomposed as 

A^^''^^ a;;? + Af + A(,"'^) (1) 

where the last term Ai"'^'' represents the effect of interference: 
tripping of the first element a, either a line or a generator 



results in rearrangement of the power flows in the system, 
everywhere except on the element /3. For this reason the 
consequent tripping of the second element /3 has an effect 
different from single contingency represented by A^. For 
linear DC models one can find a simple closed form expres- 
sion for the overall response function and the interference 
term Ai"'^"*. In realistic power grids the terms A", A^ are 
relatively small individually, as in normal situation the grid 
is protected against — 1 contingencies. Moreover, as most 
of the contingency pairs a, /3 correspond to lines that are 
far away from each other in any reasonable metric, their 
interference can be also bounded. 

As will be shown in the next section, for linear models, 
like DC load flow it is possible to produce a global bound 
for the interference term Ai"''^^ that does not depend on the 
constraint x in only 0{MN) operations. With this bound it 
is possible to certify the safety of most {a, /3) pairs and prune 
the set of contingency candidates by their direct enumeration 
in only 0{N'^) operations. So the overall complexity of the 
algorithm is limited to 0{N^) + 0{NM) operations which 
is N times smaller than the brute-force approach. Further 
accelerations are possible with the introduction of other types 
of bounds for Ai"'^' that do not depend on one of the 
contingency indices a or /3. These bounds allow additional 
pruning, although does not improve overall complexity of the 
approach. We provide the necessary technical details of the 
algorithm in the next section 

3. Application to Generators 

In this section we discuss the application of the approach 
to the problem of generator failure induced contingencies. 
Our goal is to find all tripped generator pairs that result in 
an overload at least in one the power grid lines. In other 
words, the set of single element contingencies consists of all 
N — Ng generators and the set of constraints consists of all 
M — Nl lines. The brute-force enumeration of all possible 
N — 2 contingencies and their effect on all the constraints 
would require at least 0{NqN]^) if we ignore the complexity 
of solving the DC load flow equations. Within our approach 
we reduce this number to 0{NgNl). 

In order to do so, we need to represent the response 



function A 



for the overload of line x after tripping 



to generators a, ji and in terms of single contingency re- 
sponse: aI"''^'* — /(A", Af, other parameters). Tripping of 
generator or load buses results in a loss of overall balance 
between total generation and consumption of power. In real 
life this balance is restored via the action of primary frequency 
response. In order to incorporate this effect into our analysis 
we introduce a simple dependence of the generator output on 
the shared scalar variable w representing the deviation of the 
frequency from its nominal value. Note, that the coefficient 
can represent both the droop setting of the generator and 
the frequency response of the load. 
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When the generator a is tripped, its original generation is 
distributed among other generators resulting in the frequency 
shift = P^/{P-CaP°), where P = J2^ c^P^- Similarly, 
when two generators are tripped initially, the frequency shift 
is given by w^"-''' = (po + - c„pO - cpP^^). In the 

following, for the sake of simplicity we assume that — 1 
for all the generators, and = for all the load buses. The 
generalization to the more general situation is straightforward 
but rather bulky. 

In the linear DC model the power flows are modeled 
via a vector of voltage phases 9 that satisfies the load flow 
equations: 

m = P, (3) 

where B being the nodal susceptance matrix that can be 
represented as P = AIYM'^ with the diagonal Y matrix of 
branch susceptances, and connection matrix M. In this case 
the line flow vector / is linearly related to the bus powers 
vector P via / = AP = YM^ B^^P. It is convenient for 
the further analysis to introduce the base vector of the power 
flows /° — AP", and the intermediate vector given by 
5" = AP°'", where P^-" is a vector with a single non- 
zero component P°. In this case the single A" and double 
aI"'^-* contingency response functions defined as the change 
of the flow through line x after the corresponding contingency: 

X J X J X' 

A^ = /"w" -.g^(l + cj") (4) 

Af = /°c.^-.9f(l+c.^) (5) 

Ai"'« = - + 5f )(1 + cj("^«) (6) 

This leads to the following expression for the double contin- 
gency response function: 
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This achieves our goal of expressing the effect of double 
contingency through the effect of single contingencies. Our 
next step is to develop an efficient algorithm to prune the 
set of contingencies that are certified to be safe. This safety 
certificate can be represented as the following condition: 

|/," + A„^A^ + A^„Af|</— (8) 
T, fJ^""^ - line power limit. Using the 



Where A, 



p-p" 



HJ — p_pu_pu , 

representation (jSjl we design the iterative pruning procedure 
described below. The sets of possible contingencies (a, /?) and 
possible influence pairs {a,x) are repeatedly filtered with the 
help of the global bounds for the response function A" , Af 
and frequency shifts w'^"-'^^. The sequence of the steps needed 
to carry out the algorithm is outlined below: 

Iterative pruning algorithm 

Step 1 \_0{NgNl) computations] 

For each a in the set of generators find the bound B^ = 
maxj: A" - the maximum effect of single generator tripping. 

Step 2 [O(iV^) computations] 



Check the condition A^pBa + ApaBp < 1 for all (a,/3). 
Filter out all pairs {a, (3) that don't satisfy this inequality. In 
this step the set C2 of potentially dangerous pairs (a,/3) is 
decreased due to the existence of the global bound B^ for 
single contingencies. 

Step 3 \0{NgNl) computations] 

Similarly filter out the set of potential pairs {a,x). In this 
step we bound the "interference" effect. This is an optional 
step, that requires construction of additional bounds, details 



of the procedure can be found in 1 19|. 



These steps need to be iterated until the set of double 
contingency candidates C2 stops changing, or its size reaches 
some satisfactory value. The complexity of the algorithm is 
0{Nq + NlNq), so in essence we certify safety of a lot of 
triples {a, (3, x) without directly checking them. 

4. Results 

We have tested and validated the algorithm using the largest 
publicly available grid model, which is the Polish Power Grid 
available in MATPOWER package p2| . This power grid 
consists of Ng = 204 generators and = 3269 power 
lines each with a power constraint. The total number of 
generator pairs that need to be considered by the contingency 
screening algorithm equals to {Nq — 1){Ng)/2 = 20706. 
However, the total number of actually dangerous pairs is just 
89. Brute-force approach of checking all the constraints for 
all the generator pairs would require approximately 70 million 
operations. 

When the set of contingency pairs is filtered with our 
algorithm the total number of double contingency candidates 
is reduced to 189 after the first iteration and to 114 after the 
second. The overall complexity of the iteration is estimated 
as 0{NgNi), which corresponds to approximately 6 • lO'^ 
operations, about hundred times smaller than the number of 
operations required by brute force enumeration. 
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TABLE I 

Candidate set of generators pairs size evolution with 
algorithm progression. 



Load 


1*' Iteration 
of algoiithm 


Direct 
Enumeration 


1*' Iteration 
Without dangerous line 


0% 


189 


89 




5% 


1899 


1473 


16 


10% 


6270 


5492 


29 


15% 


No feasible solution 


99 



TABLE II 

Algorithm performance on overloaded grid 



In order to understand how the algorithm performs in more 
stressed conditions we have done several experiments on the 
loaded Polish Grid. In all of these experiments we increased by 
the same percentage the consumption and generation levels 
to push the system closer to thermal limits. The number 
of dangerous double contingencies increases significantly 
as can be seen from the Table |ll] However, our algorithm 
manages to find all of them, and the number of false candidates 
seems to be proportional to the total number of dangerous 
contingencies. 

When analyzing the results we have found that most of 
these contingencies result in the overload of a single line 
close to its limit. This a natural modification of our algorithm. 
If we separate the most overloaded line in a separate set, 
the effect of all the double contingencies on this line can be 
tested only in 0{Nq) operations. However, as seen from the 
table the number of candidate pairs that can result in overload 
of other lines is reduced by several order of magnitudes. In 
the case of 10% additional load our original algorithm gives 
6270 contingencies after first iteration. However if the most 
dangerous line is removed, only 29 contingencies are left after 
first iteration. If we increase the load by 15% any feasible 
solutions disappear. 

Separation of constraint set is potentially a powerful way 
of improving the performance of the algorithm in the cases 
where the number of potentially dangerous contingencies is 
large. The most dangerous contingencies can be identified 
in a single loop over the set of generators constraint pairs, 
after which the constraints are ranked in the order of the 
appearance frequency or some other heuristic. We have done 
extensive experiments with this idea, but we expect it to result 
in significant improvements in highly loaded systems. 

Finally, we have to emphasize again, that although we have 
focused in this paper on the contingencies associated with 
generator failures, the approach can be also applied to more 
common line failures. In our previous publication 1 19] we have 
carried out the simulations for line tripping events, so the set 
of double contingencies C2 consisted of all line pairs. Only 
4 iterations with overall complexity of 0{N^) operations 
resulted in the decrease the size of candidate set size from 
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5,750 
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5,750 



5341546 to 5750 pairs (see Table. |III|). At the same time the 
total number of actual dangerous double contingencies was 
524. Although the number of false candidates in this case was 
large, the complexity of their direct analysis is still negligible, 
and comparable to the complexity of A — 1 contingency 
analysis p9) . 

One can see that the algorithm performs well for any type 
of contingencies. The underlying reason for its efficiency is 
the relative reliability of the operating point of realistic power 
grids. As the grids are protected against A^ — 1 contingencies, 
most of the pair contingencies do not result in violation 
of any constraints. Our algorithm allows to filter them out 
without actually solving the power flow for every one of them. 
The mathematical foundation of the algorithm allows us to 
guarantee that all the filtered contingencies are safe, and no 
dangerous contingency is ever missed. 



TABLE III 

Candidate set size evolution with algorithm progression. 



5. Conclusions 

In conclusion, we have presented a novel contingency 
selection algorithm for fast identification of dangerous N — 2 
contingencies. The algorithm reduces the overall number of 
operation by a factor N in comparison to straightforward 
enumeration of all contingencies. The resulting acceleration 
can be very impressive for realistic large scale networks. 
The version of the algorithm presented in these proceedings 
extends our original paper | |T9| with the inclusion of generator 
failure contingencies. 

In comparison to alternative heuristics designed to address 
the complexity of N — k contingency screening problems the 
main advantage of our approach is that it is mathematically 
certified to identify all the dangerous contingencies. No 
dangerous contingencies can be missed, and the only drawback 
of the algorithm is that some of the safe contingencies are 
included in the final candidate set. The number of these safe 
contingencies was found to be small in practically relevant 
models, although there is no mathematical bound on their 
number. 

At this moment our approach works only for DC power 
flow model, and is limited to A^ — 2 contingencies. Our 
preliminary studies indicate that it is possible to achieve 
strong reductions in computation time even in N—k situations. 
However it is still not clear whether it is possible to avoid the 
curse of dimensionality and change the complexity in k from 
exponential to polynomial. Also, it is not yet clear whether 
this technique can be generalized to nonlinear AC power flow 
models as it relies heavily on the algebraic structure of linear 
equation solution. In our opinion the most promising ideas 
that have to be explored in this direction are the attempts to 
bound the nonlinear terms, exploiting the fact the the power 
systems operate in weakly nonlinear regime. These kind of 
bounds can be naturally incorporated in our procedure and 
make it work even for more realistic models. 
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